← Back to browse · API

CVE-2023-24160

Severity

CRITICAL

CVSS

9.8

EPSS

0.0192

Risk score

39.87

CISA KEV

No

PoC

No

Published

2023-02-14

Modified

2025-03-20

First seen

2026-08-07

Aliases

EUVD-2023-28223, GHSA-HHV2-MGCF-2J9H

Products

n/a:n/a n/a

Sources

euvd EUVD-2023-28223

Description

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function.

References